Another zero day in Adobe flash player

[nmb]

@addict

according to this :http://www.adobe.com/support/security/advisories/apsa09-03.html the patch will be released on july 30.

[DavidR]

update :

Adobe 'zero-day' flaw is eight months old : http://blogs.zdnet.com/security/?p=3792

Nothing new there, same happens in other companies, one notable one

So in this case, day 0 must mean they haven't even started.

[nmb]

So in this case, day 0 must mean they haven't even started.

well said.

[hlecter]

Don't know of this mitigating of the PDF document attack vector has been posted, if not it is by now:   

http://www.kb.cert.org/vuls/id/259425

I have renamed the 2 files mentioned in the article because I have to use Adobe Reader.

It doesn't mitigate the direct Flash vuln, so that's another story.


HL

[Hermite15]

Adobe promises fix for critical Flash hole next week:
http://www.theregister.co.uk/2009/07/24/adobe_flash_patch_pre_alert/

Security advisory for Adobe Reader, Acrobat and Flash Player:
http://www.adobe.com/support/security/advisories/apsa09-03.html

Users may monitor the latest information on the Adobe Product Security Incident Response Team blog at the following URL:  http://blogs.adobe.com/psirt or by subscribing to the RSS feed here: http://blogs.adobe.com/psirt/atom.xml.